Privacy Policy

Last updated: June 2026 · Effective immediately

The short version: Your data is yours. We collect only what we need to run Cognize, we never sell it, and you can export or delete everything at any time directly from the app. We don't share health information with anyone without your explicit consent.

1. Who we are

Cognize is a mental wellness platform operated by Eunoia Ventures Private Limited, built for young adults in India. This policy explains how we handle personal data when you use our website at cognize.life and any associated applications, in full compliance with the Digital Personal Data Protection (DPDP) Act, 2023.

2. What we collect and why

Account information

When you sign up via Google, Meta, or email, we receive your name, email address, and profile picture (if provided by the OAuth provider). We use this to create your secure account, greet you by name, and enable sign-in across sessions.

Check-in and mood data

When you complete a daily check-in or deeper assessment, we store your responses (mood selection, assessment answers, and timestamp). This data is used exclusively to show your mood history and generate personalized coping tools. It is never shared outside your account.

Community posts

When you post in a community space, your text, your pseudonymous handle, and the timestamp are visible to other Cognize users in that space. Your real name and email are never displayed to other users.

Usage & Crisis data

We collect anonymized usage analytics to troubleshoot bugs and improve platform architecture. If you access crisis support resources through Cognize, we log a minimal, anonymized record (timestamp and channel) for safety monitoring purposes. This record is not linked to your personal identity.

3. What we never do

We never sell your personal data to anyone, for any reason.
We never share your health or wellness data (check-ins, assessments) with third parties without your explicit consent.
We never use your data for targeted advertising. Cognize has no ads.

4. Third-party services & Infrastructure

Cognize uses a limited set of strictly vetted third-party services to operate as Data Processors. Each is bound by contractual confidentiality:

Supabase: For secure database hosting and backend infrastructure.
Google Identity / Meta Login: For OAuth secure login processes. They receive your authentication interaction; we receive your basic profile data.
Razorpay: For secure payment processing (if applicable). We do not store your credit card details.

5. How we protect your data

All data is transmitted over HTTPS (TLS encryption in transit). Sensitive data, including assessment responses, is encrypted at rest using AES-256 encryption. Access to production databases is restricted via strict Role-Based Access Control (RBAC) and Row Level Security (RLS) ensuring users can only access their own private data.

6. Your rights under the DPDP Act 2023

Under India's DPDP Act, you have absolute control over your data:

Right to access: You can view a summary of all data we hold about you.
Right to correction: You can update your account information at any time.
Right to erasure: You can permanently delete all your data.
Right to data portability: You can export all your data in a machine-readable format.

Exercising your rights is built into the product.
You don't need to email us or fill out a legal form. The View, Export, and Delete controls are located directly in the "You" tab inside the app—accessible in one tap, any time, with no approval needed from us.

7. Data retention

We retain your personal data for as long as your account is active. If you delete your account via the "You" tab, your personally identifiable data is permanently and irreversibly purged from our active databases within 30 days. Anonymized, aggregated data (which cannot identify you) may be retained for research and product improvement.

8. Community, Pseudonymity & Crisis Situations

Your activity in community spaces is linked strictly to a pseudonymous handle. However, please be mindful that the content of your posts may contain personal details you choose to share.

A note about crisis situations:
If a community post or interaction indicates an imminent risk to life or severe self-harm, we may share minimal necessary information with emergency services or authorities. This is the only circumstance under which we would disclose information without prior consent, done solely to protect vital human interests.

9. Age Restriction

Cognize is available only to users aged 18 and older. We do not knowingly collect personal data from minors. If we learn we have inadvertently collected data from a minor, we will delete it promptly. Future versions accommodating younger students will deploy verifiable parental consent mechanisms mandated by the DPDP Act.

10. Contact & Grievance Officer

If you have questions about this policy or wish to raise a formal grievance regarding your personal data, please contact our designated Grievance Officer:

Name: Grievance Officer, Eunoia Ventures
Email: privacy@cognize.life
Registered Address:
Eunoia Ventures Private Limited
240/31, Near Petrol Pump, Sarvodaya Nagar
Banda, Uttar Pradesh - 210001, India

For general platform inquiries, please contact hello@cognize.life.